CVE-2021-33656

MediumCVSS 6.8/10Last modified Oct 8, 2026

Description

When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jul 18, 2022
Last modified
Oct 8, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-336578.8There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMCVE-2021-336587.8atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate the local privilegeCVE-2021-336595.5SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crCVE-2021-336605.5SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FLI file received from untrusted sources which results in crCVE-2021-336615.5SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crCVE-2021-336624.4Under certain conditions, the installation of SAP Business One, version - 10.0, discloses sensitive information on the file system allowing CVE-2021-336635.3SAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.2CVE-2021-336645.4SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), versions - SAP_UI - 750,752,753,754,755, SAP_BASIS - 702, 731CVE-2021-336655.4SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML), versions - KRNL64NUC - 7.49, KRNL64UC - 7.49,7.53, KERNEL - CVE-2021-336666.1When SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME sniffing, which, in certain circumstances, coulCVE-2021-336674.3Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker to access jsp source CVE-2021-336687.5Due to improper input sanitization, specially crafted LDAP queries can be injected by an unauthenticated user. This could partially impact t